Your House knows what you did last Summer

Transcription

1 Your House knows what you did last Summer Dr. Steffen Wendzel Internet Security Days 2015

2 Building Automation Systems (BAS) n Early systems (1950 s) n Pneumatic systems n Later systems (1960 s): n First electric components and robust networks n Today: n Smart Buildings n Internet of Things (IoT)

3 Goals of BAS n Energy saving n Reducing operating costs n Enhanced life safety and security n Fast and effective service n Environmental friendly

4

5 How many are connected to the Internet? n Malchow and Klick (2014) counted BAS via SHODAN n Most systems were found in the USA (~15.000) n One out of ten systems with known vulnerabilities n Praus and Kastner (2014): n USA: ~9.000 BACnet devices n Germany: ~120 BACnet devices and ~630 KNX devices

6 WHAT COULD POSSIBLY HAPPEN?

7 Surveillance n Private or sensitive information can be accessed or leaked using building automation equipment. Example: An employee observes the presence of another employee in an office room using presence sensors (directly) or CO 2 and temperature sensors (indirectly).

8 Buildings as Botnets n So-called Smart Building Botnets can be realized in practice. n These botnets use buildings as bots. Examples: > Parallel surveillance of thousands of buildings and their inhabitants. > Sell private data of thousands to health insurance companies. > Increase oil consumption of a smart city to sell more oil.

9 Organized Thefts n BAS wardriving (Kahler and Wendzel, 2012) helps to identify vulnerable smart buildings and homes. n How? Opening windows or doors allows thieves to enter a building. Sensor information can be used to see whether someone is actually at home, or not, reducing the risk for thieves.

10 Disrupting Organizational Processes n Several organizational processes rely on building automation systems. n If attackers stop a BAS from working, they also influence organizational processes. n Example: Heating, air-conditioning and lightening in a greenhouse.

11 Building Automation Systems Protection: SELECTED SOLUTIONS FROM OUR OWN RESEARCH

12 Traffic Normalization n Traffic sent within building automation networks is monitored by a traffic normalizer. n To evaluate traffic, the normalizer is `aware of the building s setup and typical behavior. Normalization can provide high-quality analysis results of all events. Traffic Normalizer

13 Situational Awareness n BAS are complex distributed systems with a large number of parallel events to monitor. n Studying visualization methods helps to determine the optimal method to present events of the BAS to an operator.

14 Tagging of Sensitive Data n Ensuring that sensitive data is not distributed to all nodes of a network. This solution was designed for easy implementation in practice PDU Type SEG MOR SA PDU Type Max Segs Max Resp 2 Service Choice Invoke ID Sequence Number Proposed Window Size Service Request Service Choice Service Request Unconfirmed-Request-PDU Confirmed-Request-PDU

15 CONCLUSION

16 Balance Between Functionality and Security

17 Thank you for your attention! What we do: Security Analysis of Building Automation Systems Prototype Development Consulting and Training Dr. Steffen Wendzel Head of Secure Building Automation Systems Dep. Cyber Security Fraunhofer FKIE, Bonn